Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Markus Fischer
Hi all, I have a question regarding the patch level of the Dojo plugin shipped with Struts 2.3.x. According to the Apache Struts 2 Documentation (see [1]), Struts 2.3.x ships with Dojo 0.4.3, which is vulnerable to two major security issues (CVE-2010-2276 and CVE-2010-2272, see [2]). Is a Struts

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Lukasz Lenart
2014-10-06 15:42 GMT+02:00 Markus Fischer markus.fisc...@knipp.de: Hi all, I have a question regarding the patch level of the Dojo plugin shipped with Struts 2.3.x. According to the Apache Struts 2 Documentation (see [1]), Struts 2.3.x ships with Dojo 0.4.3, which is vulnerable to two major

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Dave Newton
I'd add that since the plugin has been deprecated since S2.1 it's unlikely anything was ever done to deal with it. On Mon, Oct 6, 2014 at 10:00 AM, Lukasz Lenart lukaszlen...@apache.org wrote: 2014-10-06 15:42 GMT+02:00 Markus Fischer markus.fisc...@knipp.de: Hi all, I have a question

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Markus Fischer
Hi. Is a Struts 2.3.x system using the Dojo plugin vulnerable to [...] security issues, or have they been fixed somehow? Am 06.10.2014 um 16:10 schrieb Dave Newton: I'd add that since the plugin has been deprecated since S2.1 it's unlikely anything was ever done to deal with it. Lukasz

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Dave Newton
There's an S2-jQuery plugin, which for simple (and some complex) is a solid replacement. I personally tend to do the JS stuff manually, YMMV. Dave On Mon, Oct 6, 2014 at 10:37 AM, Markus Fischer markus.fisc...@knipp.de wrote: Hi. Is a Struts 2.3.x system using the Dojo plugin vulnerable

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Christoph Nenning
There's an S2-jQuery plugin, which for simple (and some complex) is a solid replacement. I personally tend to do the JS stuff manually, YMMV. Dave you can find it here: https://github.com/struts-community-plugins/struts2-jquery regards, Christoph This Email was scanned by Sophos

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Markus Fischer
Hi. Am 06.10.2014 um 16:43 schrieb Christoph Nenning: There's an S2-jQuery plugin, which for simple (and some complex) is a solid replacement. I personally tend to do the JS stuff manually, YMMV. you can find it here: https://github.com/struts-community-plugins/struts2-jquery Thank you

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread Christoph Nenning
There's an S2-jQuery plugin, which for simple (and some complex) is a solid replacement. I personally tend to do the JS stuff manually, YMMV. you can find it here: https://github.com/struts-community-plugins/struts2-jquery Thank you both for the helpful suggestions. :) Off

Re: Is the Dojo plugin version shipped with Struts 2.3.x vulnerable?

2014-10-06 Thread JOSE L MARTINEZ-AVIAL
We use Dojo with Struts 2, but we don't use the plugin. We just use both together, and they work quite nicely. 2014-10-06 11:01 GMT-04:00 Christoph Nenning christoph.nenn...@lex-com.net : There's an S2-jQuery plugin, which for simple (and some complex) is a solid replacement. I

Any experience deploying Struts2 war webapps in Jetty 9.2.x

2014-10-06 Thread Jean-Claude Dauphin
Hello, I always got the following error when deploying my Strut2 war in Jetty 9.2.3 HTTP ERROR 404 Problem accessing /Web-JISIS3/. Reason: There is no Action mapped for namespace [/] and action name [] associated with context path [/Web-JISIS3]. -- *Powered

RE: Any experience deploying Struts2 war webapps in Jetty 9.2.x

2014-10-06 Thread Martin Gainty
Date: Mon, 6 Oct 2014 22:46:30 +0200 Subject: Any experience deploying Struts2 war webapps in Jetty 9.2.x From: jc.daup...@gmail.com To: user@struts.apache.org Hello, I always got the following error when deploying my Strut2 war in Jetty 9.2.3 HTTP ERROR 404 Problem accessing

Re: Any experience deploying Struts2 war webapps in Jetty 9.2.x

2014-10-06 Thread Lukasz Lenart
2014-10-06 22:46 GMT+02:00 Jean-Claude Dauphin jc.daup...@gmail.com: Hello, I always got the following error when deploying my Strut2 war in Jetty 9.2.3 HTTP ERROR 404 Problem accessing /Web-JISIS3/. Reason: There is no Action mapped for namespace [/] and action name [] associated